ASP.NET using SQL query to update and display

[sensitive]

SqlCommand search = new SqlCommand("select * from emp where EmpId = " + TextBox1.Text;